CVE-2026-43370
drm/amdgpu: Fix use-after-free race in VM acquire
Using Linux by Linux?
Get instant alerts when new vulnerabilities affect Linux - before attackers find them.
Description
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix use-after-free race in VM acquire Replace non-atomic vm->process_info assignment with cmpxchg() to prevent race when parent/child processes sharing a drm_file both try to acquire the same VM after fork(). (cherry picked from commit c7c573275ec20db05be769288a3e3bb2250ec618)
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
- https://git.kernel.org/stable/c/ae87aea330c24f462fc7058ed543ba8bc6798447
- https://git.kernel.org/stable/c/46d309996bd9251792d7dafdbaf615cf202b4447
- https://git.kernel.org/stable/c/e61e355cbe49e585097eee28c15b862bfb1c0668
- https://git.kernel.org/stable/c/c658c1c85ec235b7ecfbf8dbfee385b1332088f4
- https://git.kernel.org/stable/c/904025fa8bba1d028adade33346372b4ac1a9249
References (8)
SSVC — Action Prioritization
SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.
CVSS
Quick Info
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.